Skip to content

chore: EVChargePilot stays unreleased for now #4

chore: EVChargePilot stays unreleased for now

chore: EVChargePilot stays unreleased for now #4

Triggered via push August 27, 2026 16:04
Status Success
Total duration 3m 40s
Artifacts 2

security.yml

on: push
Permission-drift gate (blocking)
5s
Permission-drift gate (blocking)
Secret scan (blocking)
11s
Secret scan (blocking)
SAST mobile (mobsfscan + semgrep)
2m 18s
SAST mobile (mobsfscan + semgrep)
Dependency scan (OWASP)
3m 35s
Dependency scan (OWASP)
Fit to window
Zoom out
Zoom in

Annotations

3 errors and 12 warnings
Permission-drift gate (blocking)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Secret scan (blocking)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, gitleaks/gitleaks-action@v2. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
SAST mobile (mobsfscan + semgrep)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-python@v5, actions/upload-artifact@v4, github/codeql-action/upload-sarif@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
SAST mobile (mobsfscan + semgrep)
Failed to gather information for telemetry: Resource not accessible by integration - https://docs.github.com/rest/actions/workflow-runs#get-a-workflow-run. Will skip sending status report.
SAST mobile (mobsfscan + semgrep)
Failed to gather information for telemetry: Resource not accessible by integration - https://docs.github.com/rest/actions/workflow-runs#get-a-workflow-run. Will skip sending status report.
SAST mobile (mobsfscan + semgrep)
Failed to gather information for telemetry: Resource not accessible by integration - https://docs.github.com/rest/actions/workflow-runs#get-a-workflow-run. Will skip sending status report.
SAST mobile (mobsfscan + semgrep)
Failed to gather information for telemetry: Resource not accessible by integration - https://docs.github.com/rest/actions/workflow-runs#get-a-workflow-run. Will skip sending status report.
SAST mobile (mobsfscan + semgrep)
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
Dependency scan (OWASP)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, github/codeql-action/upload-sarif@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Dependency scan (OWASP)
Failed to gather information for telemetry: Resource not accessible by integration - https://docs.github.com/rest/actions/workflow-runs#get-a-workflow-run. Will skip sending status report.
Dependency scan (OWASP)
Failed to gather information for telemetry: Resource not accessible by integration - https://docs.github.com/rest/actions/workflow-runs#get-a-workflow-run. Will skip sending status report.
Dependency scan (OWASP)
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/

Artifacts

Produced during runtime
Name Size Digest
gitleaks-results.sarif
6.63 KB
sha256:4a30a8d3112c8dda39049239370d6945c34e821cd0d870493cd400e8fed44ac8
security-report
53.2 KB
sha256:7313f79a4bece5e08b38913aca48a4089bdf4c59b9daea02cb27fb1e1bf8237f